Procab
losttrust listed this organization on its leak site on Sep 26, 2023.
- Listing date
- Sep 26, 2023
- Attack date
- Sep 26, 2023
Listing text
With a vision of 0% incidents we are driven to create safety in the process industry. We offer the market the best selection of valves and accessories control flows. It our partners and customers we want to create as good result from first contact. With commitment and high level of service this will be done in improvement processes, continues need as well as in project or in complete systems for big as well as small plants. Procab was founded in 1984 and have since 2003 been in its existing form as a modern and personal valve company. With Knowledge, Confident and Helpfulness as our beacon we want to grow in long term relations with both customers and partners. We want to develop our selves all the time to offer a better product, not the least in projects related to environment and innovations. Welcome to the modern company of knowledge and Valves.
About the group
losttrust posted its first listing on Sep 26, 2023 and has listed 53 organizations to date.
LostTrust is a double-extortion ransomware operation that emerged in March 2023 and publicized over 50 victims within days of launching its leak site in September 2023, believed to be a rebrand of the MetaEncryptor gang, primarily targeting manufacturing, professional services, construction, and education sectors with 71% of known victims in the US.
Learning center
What does this listing mean?
Ransomware groups move data out of the organization before encrypting systems and threaten to publish it if the ransom is not paid. This method is called double extortion.
The listing shows that the group claims to have targeted the organization. Whether the data was published is shown by the later status of the listing.
What should you do if your organization is listed on a leak site?
- Record the listing and any published sample files; do not visit the leak site from the corporate network.
- Isolate affected systems and preserve logs without deleting them.
- Determine which data left the organization; if personal data is involved, review notification obligations with your legal team.
- Make any decision about the ransom demand together with legal, management and incident response.
- Do not bring systems back online before the attacker’s entry point is closed.
Is your organization mentioned?
Search with your domain to check whether your organization appears in ransomware listings, leaked records, forums and Telegram channels.
Search your domainIntelligence 360
Customer intelligence on top of Infostealer Detection: leaked accounts of end users who sign in to your site.